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Entanglement distillation transforms weakly entangled noisy states into highly entangled states, a primitive to 
be used in quantum repeater schemes and other protocols designed for quantum communication and key distri- 
bution. In this work, we present a comprehensive framework for continuous-variable entanglement distillation 
schemes that convert noisy non-Gaussian states into Gaussian ones in many iterations of the protocol. Instances 
of these protocols include (a) the recursive Gaussifier protocol, (b) the temporally-reordered recursive Gaussifier 
protocol, (c) the pumping Gaussifier protocol. The flexibility of these protocols give rise to several beneficial 
trade-offs related to success probabilities or memory requirements that can be adjusted to reflect experimental 
specifics. Despite these protocols involving measurements, we relate the convergence in this protocols to new 
instances of non-commutative central limit theorems, in a formalism that we lay out in great detail. Implications 
of the findings for quantum repeater schemes are discussed. 



Photons with information encoded in continuous variable 
degrees of freedom can travel great distance without sig- 
nificant decoherence. Using beam-splitters, phase-shifters 
and detectors we can coherently manipulate photons and 
make measurements. Specifically in the continuous-variable 
regime, brighter sources of light are available than for sin- 
gle photon, discrete, light sources. This has motivated re- 
search into the usefulness of photonic systems for quantum 
cryptography, communication and distributed quantum infor- 
mation processing [T] |2|. Protocols for finite dimensional 
systems with arbitary quantum control, do not typically have 
exact analogs but rather cousins in the linear optical setting. 
Any two qubit entangled state can be distilled by local opera- 
tions 1 3 1, whereas distillation of entangled Gaussian state us- 
ing linear optics is impossible |4-6|. Soon after these impos- 
sibility proofs were shown, it was discovered that an initially 
non-Gaussian state with linear optics could suffice to distill 
entanglement |7-9|. The original distillation protocol, con- 
ditioned on detectors finding no photons, outputs a state that 
evolves toward a Gaussian. Since then several variants of the 
protocol have been found to exhibit the same Gaussification 
phenomena 1 10 1 1 1. The need for non-Gaussian states to fuel 
these protocols has kindled an interest in the idea of Wigner 
function negativity as a resource lfT2l[T3l . Similar "no-go" re- 
sults 1 14 1 exist that prohibit the distillation of highly squeezed 
states using only passive linear optics, with some known pro- 
posals for systems with relaxed constraints ifTSl . 

Known protocols that Gaussify and distill entanglement 
have the feature of being recursive. To execute these pro- 
tocols to greater depth requires greater memory storage re- 
quirements. The quantum states are combined via a tree like 
process of pairwise distillation, with each branch demanding 
additional memory. In the finite dimensional setting, entan- 
glement pumping protocols 116^24 i offer the option of com- 
pressing the spatial memory requirement, down to even 3- 
4 qubits per location, at the cost of reduced efficiency and 
increased temporal overheads. Recently, a continuous vari- 
able analog of entanglement pumping, the compact distillery 
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scheme, has been proposed [25 1. This requires storage of 2 
modes per location at any moment in time. However, this 
pumping protocol is not a direct analog of the Gaussification 
protocols, in particular it does not Gaussify and the maximum 
possible increase in entanglement is modest. 

Here we extend and further develop the techniques of Ref. 
Il26l where the class of Gaussification protocols was vastly 
broadened and shown to work in virtue of quantum central 
limit theorems. Here we further extend the class of proto- 
cols and introduce the concept of a pumping Gaussifier that 
only requires 2 modes of memory per location. Unlike the 
compact distillery scheme, our pumping protocol still Gaus- 
sifies and is capable of the same large increases of entan- 
glement possible with the recursive Gaussifier. Surprisingly, 
the pumping-Gaussifer can output the same final state as the 
more well known recursive-Gaussifiers when both protocols 
are provided with the same number of initial raw copies. 
This makes pumping-Gaussifers extremely promising proto- 
cols that are especially attractive for experiments with only a 
small number of modes. We also comment on implications of 
our findings to devising novel schemes for long distance quan- 
tum communication via quantum repeater networks. Despite 
considerable research on CV entanglement distillation, sur- 
prisingly these techniques have not previously been explicitly 
applied to design of quantum repeaters. Indeed, here we pro- 
vide the first concrete evidence in the CV context that using 
quantum repeaters can achieve greater distances of communi- 
cation than direct transmission. 

On a technical level, the approach taken here is comple- 
mentary, but subtly distinct, from our earlier results |26|. In 
particular, compared to these earlier results, the relationship 
between quantum central limit theorems and Gaussification 
protocols requires a smaller and simpler set of assumptions re- 
quired of the physical system. Center stage is taken by a class 
of non-commutative central limit theorems, general enough to 
capture all of the aforementioned situations of state manipu- 
lation, including post-selecting measurements. The require- 
ments for a quantum central limit theorem to be valid will be 
highlighted and discussed in great detail. 
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I. CONTINUOUS VARIABLE SYSTEMS AND PHASE 
SPACE 

Here we introduce our notation and briefly introduce some 
phase space concepts used throughout. For more details see 
Refs. ||T]|5]|27l. For a single mode of a continuous variable 
(herein CV) system, two important observables are 

X = {a + a))l^, (1) 
P ^i{a- d))lV2, (2) 

that are analogs of position and momentum in simple har- 
monic oscillators, with a and a) being the photonic annihi- 
lation and creation operators. For m optical modes, the set of 
2m quadrature operators is denoted as a vector of operators 

Q = {Ql^ Q2, ■ ■ ■ , Qlm-l, Qlm) — {Xi,Pi, , . . . , Xm, P-m) ■ 

(3) 

For a quantum state p, the expectation values of these quadra- 
tures are denoted by a set of 2m real numbers 

[dp]fc = tr(gfcp), (4) 

which are called the first moments of p. Typically, we are in- 
terested in states with zero first moments, so dp = 0. The 
second moments, akin to variances, are captured by the co- 
variance matrix 

[Fplj- fc = 23?{tr[(g, - [dp],)(Qfc - [dp]fc)p]}, (5) 

which for states with zero first moments simplifies to 

[Fp],- fe = tv[{Q,Qk + QkQ3)p\- (6) 

It is easy to verify that, for physical states, the covariance ma- 
trix is real and symmetric. 

The first and second moments only partially describe the 
quantum state, but a complete description can be achieved by 
using one of a plethora of phase space representations. In par- 
ticular we make use of characteristic functions Xp ■ I^^™ ^ C 
such that 

Xp{r)=tT[D{r)p], (7) 
where D{r) is the unitary displacement or Weyl operator 

D{r) = exp(ir.Q) = exp ^i^J'jQj^ • (8) 

We say a state is Gaussian if and only if its characteristic func- 
tion has a Gaussian shape, which entails 

Xp(r) = exp(ir.dp - r^rpr/4). (9) 

Any other state is said to be non-Gaussian. Notable Gaussian 
states include the vacuum and the coherent states. The Wigner 
function, which is perhaps more widely known, is simply the 
Fourier transform of the characteristic function. Since the 
Fourier transform maps the set of Gaussian functions to it- 
self, the definition of Gaussian states is equivalent if stated in 



terms of Wigner functions. For our purposes the characteristic 
function is the most useful choice of phase space representa- 
tion. 

Regarding dynamics, we say a unitary is Gaussian if it has 
the form U — exp(iiJ) where H is Hermitian and quadratic in 
annihilation and creation operators. The canonical example of 
a Gaussian measurement is a homodyne, or quadrature, mea- 
surement of an observable Qj. More general Gaussian mea- 
surements can be related to quadrature measurements by use 
of Gaussian unitaries and ancillary Gaussian states. For exam- 
ple, so called 8-port homodyne measurements project onto the 
coherent states and can be implemented by using two quadra- 
ture measurements and an ancillary mode in the vacuum state. 

The most general kind of Gaussian operations are Gaus- 
sian channels (completely positive maps). This class of phys- 
ical operations are most naturally defined by using the Choi- 
Jamiolkowski (CJ) isomorphism |28, 29 1 between quantum 
states and channels. For a channel, £, mapping m-mode quan- 
tum states to TO-mode quantum states the CJ-state is 

= (10) 

where ^ — \(f>) ((/jI**™ is a pure unnormalized operator with 

00 

\ct>) = Y,\n,n). (11) 

Conversely, for all there exists a unique quantum channel 
£ specified by the isomorphism, such that 

= tr^ , (12) 

where Tb is a partial transposition with respect to B. When 
the Gaussian CP map acts on a Gaussian state, p, with covari- 
ance matrix, Fp, it has been shown that the output state 
p' is also Gaussian with covariance matrix 

Tp' = JAA ~ 1ab{ibb + rp)~^7Js, (13) 

where 

(iaa1ab\ 
V Tab IBB J 

is the covariance matrix of shown as a block matrix with 
respect to the partition between systems A and B. The ex- 
pression for Fp' takes the form of a Schur complement, which 
often arises in matrix problems and Gaussian integration |30|. 
The partial transposition has a simple effect on covariance ma- 
trices, and so explicitly calculating the partial transposed state 
can be circumvented. Partial transposition, in the Heisenberg 
picture, takes P ^ —P for every momentum operator acting 
on system B. Assume we know /tr(<l'f ) and its covariance 
matrix 7. It follows that the partial transposed, $J^/tr(<I>£), 
has covariance matrix 7 = A7A where A = 1^^ and 
Tb =diag(l, -1). 
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n. BUILDING BLOCKS 

Here we describe the basic building blocks of the protocols 
we consider Each building block is specified by the follow- 
ing: an operator, 11, called the filter; a value R for the beam- 
splitter reflectivity; and a choice of two m-mode states that 
may be outputs from previous building blocks. Throughout 
these notes any building blocks combined into a larger pro- 
tocol will use the same filter H, which must be an invertible 
operator proportional to a product Gaussian state with zero 
first moments. For every filter 11 we can associate a POVM 
(positive operator valued measure) measurement that can be 
locally implemented. Denoting the POVM measurement out- 
comes by M and the resulting projection Hm, we require that 



n = / /MHMrfM, 



(15) 



for some real- valued < /a/ < 1. To see why such a POVM 
always exists we first note that when 11 is a thermal state it 
can always decomposed as an integral over coherent states. As 
noted earlier, POVM measurements with coherent states as el- 
ements can be implemented with Gaussian operations and are 
known as 8-port homodyne measurements. All product Gaus- 
sians are equivalent up-to a local Gaussian unitary operation 
to a thermal state, and so the relevant POVM measurement is 
similarly equivalent an 8-port homodyne measurement. The 
weighting /m is a function of the measurement outcome, M, 
and dictates the postselection strategy used in the building 
block. Another important special case is the one where 11 ap- 
proximates the vacuum arbitrarily well, which is the situation 
considered in Ref. \1 . 8 |). 

Implementation of a building block is outlined in Fig.[T]and 
is as following: 

1. Take two m-mode quantum states (modes Aj) and 
Pb (modes Bj) ; 

2. each of the m parties mixes the two states on a beam- 
spiller of reflectivity R; 

3. on each of the beam-splitters, take the output from the 
B-modes and locally implement the Gaussian measure- 
ment with local POVM elements {11^/} 

4. given measurement outcome data M, postselect declar- 
ing a success with probability /a/; 

5. take the unmeasured A-modes and output from the 
building block. 

Here, we have labelled the 2TO-modes as 
{Al, , . . . , Am, Bl, . . . , Bm} and modes sharing the 
same numerical index are part of the same physical location. 
When successful, the building block outputs a state 



P cc / fMtvBiUipA ® Pb)UH1 ® IlM)]dM. 



(16) 



The unitary, U, represents the effect of the beam-splitters such 
that for all j 



where T = 1 — R. Taking the integral over measurement 
outcomes inside the partial trace and using Eq. ([TSj we have 



p' cx iYB[U{pA® Pb)U^ 



(18) 



Unfortunately, the effect of this map can be difficult to analyt- 
ically evaluate. The root of the technicalities are related to the 
fact that U and 1 (g) 11 do not commute. However, following 
the insights of Ref. f26l, we know that by moving to phase 
space and working with a different object from p' the effect 
of the map can be simplified. This is the key insight that ren- 
ders the analysis feasible, and at the same time the presence 
of the filters necessitates to deviate from the architecture of 
a standard non-commutative central limit theorem |31|. In 
Ref 1,26 J the characteristic function of the non-Hermitian ob- 
ject p'n was considered. Here we follow parallel reasoning 
but instead consider the Hermitian object II^/^p'II^/^ and its 
characteristic function. We make use of 



Pp'P 



(19) 



tr(Pp'P) 

for the normalized and Hermitian filtered object, with 

P = n^/^ (20) 

This object is then 

r' oc trs[(F (g) l)U{pA » Pb)U\P ® H)]. (21) 

Splitting n = PP and using the cyclicity of the trace we have 
the more symmetric formula 



r' (xtTB[{P®P)UipA®pB)U\P(g)P)]. 



(22) 



The next fact we employ is that for any Gaussian operator with 
zero-first moments, such as P, we have that 



U\P®P)U ^ P(g)P. 



(23) 



This equality is well known (see e.g. Ref 132 |), but for com- 
pleteness we give a proof in App. [A] Hence we have 



t' oc tTB[U{PpAP (g PpsP)C/^]. 



(24) 



Again using the shortened notation, ta oc PpaP and tb oc 
PpsP, gives 



r' oc trs[C/(TA®TB)[/^]. 



(25) 



Ta 



RciBj 



(17) 



By choosing 11, and equivalently P, as proportional to a Gaus- 
sian state, we have been able to exploit the symmetry of the 
problem to reach a greatly simplified expression. The charac- 
teristic function of this object is then 

Xr'{Y) oitv[{t® D{y))U{t A ®tb)U\ (26) 

Conjugating with the displacement operator gives 

U\t®D{v))U = C/^cxp[i(]l(gr.Q)]C/, 

= exp[iVT(r.Q ®t) + i\/R{t (g r.Q)], 
= D(Vrr)(g)i?(/Rr). (27) 
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FIG. 1. An implementation of an individual building block with 
beam-splitter reflectivity R for (a) single mode states and (b) two 
mode states. Generalization to m-mode states is straightforward as 
each additional party performs the same local unitaries. 



Using this we have 



Xr'(r) cx tT[D{^/fv)TA ® D{VRr)TB]- 
cx tiiD{Vfr)TAMD{^^Rr)TB]. 



(28) 



However, these factors are simply the characteristic functions 
for T4 and tb but with a modified value of r, so 



(29) 



We can shift to equality, rather than proportionally, because 
the characteristic function of a unit trace object takes Xt(0) — 
1. As promised, the effect of the mapping for the r filtered ob- 
jects is much more straightforward than for the actual density 
matrices. Note that if we considered non-Hermitian objects 
<^A,B oc pa,b^ and output a' = p'H, we would have simi- 
larly arrived at 



(30) 



These results generalize those of Ref. 1261 . were the input 
states where taken to be identical and reflectivity set to be 
50/50 and only the non-Hermitian objects were considered. 
Here we find that subsequent analysis is simplified if we work 
with the characteristic functions for the Hermitian objects. 

Before proceeding we remark on the assumption that 11, 
and hence all P, are invertible. The assumption is required 
later to ensure that r' uniquely defined p'. All Gaussian 
operators, except projectors, are full rank and invertible so 
the assumption simply rules out projectors. However, we 
wish for our general analysis to encompass previous proto- 
cols 121 m |25l that prescribe projecting two modes onto a 
vacuum, so 11 = P = |0,0)(0,0|, which is clearly not in- 
vertible. However, any reahstic experiment will use detectors 
with some non-unit efficiency of photon detection. Indeed, of- 
ten efficiency is much less than unity. Such inefficiencies can 
be modelled by placing a beam-splitter ahead of the detector, 
and can be easily incorporated into our analysis. This modifi- 
cation results in an realistic filter that is still Gaussian but no 
longer a projector. As such, the assumption of invertible fil- 
ters is always justified even when studying previous proposals 
based on vacuum projections. 



III. PROTOCOLS 



A. The recursive Gaussifer 



First we review the class of protocols introduced in Ref. 
1 26 1 that generalize the proposals of Refs. QlHl. We refer to 
the protocols considered here as recursive-Gaussifers and the 
general structure is outlined in Fig. (|2^). All building blocks 
of the recursive protocol use the same filter 11, and set R — 
T = 1/2. On the first round of the protocol many copies of a 
raw state pi are taken and are simultaneously used as inputs to 
building blocks, with pa — Pb = Pi- The successful outputs 
from these rounds are labelled p2, and used as the inputs into 
the building blocks for the next round. On the n*'' round, each 
building block takes two input states labelled p2" and outputs 
/92"+i, so the subscript denotes the number of raw copies so 
far. Denoting T2" cx Pp2" P and applying Eq. ( 30 1 we find 
that 



-V 



,V2; ' 

which is easier to represent in terms of = 2" so 

2 



T2N Xrjv 



\V2 



In terms of ti we have 



Xtjv Xt 



N 



(31) 



(32) 



(33) 



To reach n rounds, assuming every building blocks succeeds, 
we must have a memory capable of storing N — 2" copies 
of pi simultaneously. The exponential increase in memory 
is required because we have assumed that all building blocks 
within a round are executed simultaneously. However, relax- 
ing the simultaneity requirement and using a smart ordering 
— for instance as in Fig. ^p) — the recursive protocol can 
implement n rounds with a storage capacity of n + 1 modes 
per location, albeit at the cost of increasing the number of time 
steps. A growing quantum memory seems unavoidable, but 
we will soon see how it can be circumvented. The sequence 
of characteristic functions 



{Xti ; Xt2 7 Xt4 ; Xts ; • ■ • } 



(34) 



is known to evolve toward a Gaussian with unchanged second 
moments by virtue of a central limit theorem. Later we will 
review these ideas later, and also extent them to make state- 
ments about the physical state. 



B. The pumping Gaussifier 

Here we propose a novel protocol that uses a fixed initial 
state to repeatedly pump a target state, surprisingly resulting 
in the same output as the recursive protocol. The building 
blocks that compose the pumping-Gaussifier use two distinct 
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FIG. 2. Different protocols combining building blocks in ways. All 
building blocks use the same filter, D, and are labelled with their 
beam-splitter reflectivity R. (a) the recursive Gaussifier protocol; (b) 
the temporally-reordered recursive Gaussifier protocol; (c) the pump- 
ing Gaussifier protocol; and (d) the compact distillery protocol. The 
key show how the building block labels compare with the variables 
used in SecUll 



input states in later rounds and also weaken the beam-splitter 
reflectivity with the number of steps. On the N*'^ step, we 
take a copy of and a raw initial state pi and mix on a 
beam-splitter of reflectivity ~ ^/{N + 1) as shown in 
Fig. (j2]:). The output is labelled pn+i and in the phase space 
picture we have the iterative formula 



Xr„+i (r) Xr„ I -7==^r ] Xn ( ^^L=r ] , (35) 



\/FTT 



We can verify that 



Xrjv (r) = Xr 



satisfies the iterative formula because 



N 



(36) 



N 



Xt„+i (r) = Xr, I y,, , , I Xri 



N 



N+l 



(37) 



The neat cancellation of v A^/viV only occurs because of our 
exact choice of beam-splitter reflectivity. After the N^^ step, 
the characteristic function matches that of the recursive Gaus- 
sifier implemented to depth n — log2(iV). Furthermore, for 



successful implementations both protocols consume the same 
number of raw copies to achieve the same output. However, in 
the pumping protocol we also have the option of terminating 
after a number of steps not of the form N = 2". 



C. The compact distillery 

The compact distillery (CD) protocol [25 J also repeatedly 
pumps with the same initial state, but it keeps a constant beam- 
splitter reflectivity of i? — 1/2 as outlined in Fig. (j2jl). The 
CD protocol is known to provide a very different evolution 
from both our Gaussifier protocols. To highlight that it pro- 
duces different states from the Gaussifiers, we label the out- 
put of the A^*'' step as $Ar+i and equate $i ~ pi for the raw 
resource. It considers the special case of two mode states, and 
using projections onto the vacuum P = |0, 0)(0, 0|. Using 
(f)N oc P^nP we have the iterative relation 



(38) 



We can immediately deduce properties of <j)N+i from those 
of the initial operator (pi. For instance, if the characteristic 
function x^i is zero at point rp then the characteristic func- 
tion X0JV+1 is zero at \/2ro for all N. Hence, the charac- 
teristic function X4>n+i ^i^^ ^'^^ have a Gaussian shape and 
consequently the corresponding physical state, $oo, will also 
be non-Gaussian. If there exists a limiting characteristic func- 
tion, the same argument applies and so non-Gaussianity 
would persist even in the asymptotic limit of many iterations. 
Indeed, all the examples considered in Ref. |25| found that 
the protocol converges toward non-Gaussian states. Here we 
see this is to be expected and have a clear explanation of why 
this occurs. This illustrates the merit of our phase space tech- 
niques even for examining protocols that do not Gaussify. 

The CD protocol was proposed as an alternative to recursive 
Gaussifiers to reduce the required quantum memory and bring 
it closer to what is currently experimental feasible. However, 
we have seen that our pumping-Gaussifier can also operate 
under these stringent memory constraints. We must then con- 
sider other figures of merit to compare these protocols. The 
authors of Ref. |25| showed that, when feed with weakly 
entangled photon subtracted states, a few rounds of the CD 
achieves a similar entanglement increase as a few rounds of 
the Gaussifier However, the maximum achievable entangle- 
ment of the Gaussifer proved to be much higher, and so af- 
ter only 3-4 rounds the advantage of the pumping Gaussifier 
can be significant. Of course, whether we desire the output 
state to be non-Gaussian or Gaussian depends on the context 
and what quantum information protocol the resource is subse- 
quently used for and so this aspect is less easy to compare. 
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IV. CENTRAL LIMIT THEOREMS 

A. Characteristic function convergence 

Central limit theorems are results that tell us when a se- 
quence of characteristic functions approaches a Gaussian 
function and in what way they converge. Throughout we are 
interested in sequences of characteristic functions output by 
the recursive and pumping Gaussifers. 

Definition 1 (Central limit sequence) 'We say a sequence of 
Hermitian positive operators {tjv} and associated character- 
istic functions {Xrjv} '2 central limit sequence if 



Xtn (r) = Xt 



N 



(39) 



where Xti has zero first moments and T^- second moments. 

For such a sequence, if ri is Hermitian and positive then the 
results of Refs. Il26l 1311 [33l govern its limiting behaviour. 
More generally, if ri is non-Hermitian then recent results f Ml 
give conditions under which it approaches a Gaussian. These 
techniques were used to demonstrate Gaussification of physi- 
cal systems by considering ti oc piII. Here we consider the 
Hermitian ti oc PpiP for which the convergence properties 
are simpler to state. 

Theorem 1 (General quantum central limit theorem) 

Consider a central limit sequence {xtn }• '^^J finite 

radius tq and any accuracy e > 0, there exists an such 
that for all N > and all |r| < Tq we have 

IXr„(r)-Xr„(r)| <e. (40) 

where Xt^ (r) is a Gaussian with covariance matrix F^-j^. 

The theorem can be proven by taking a cross section of the 
characteristic function for a unit direction r, such that 



/jv(i) = Xr«(ir), 



(41) 



and proving convergence to a Gaussian function in phase 
space for all such cross sections. Each cross section is equiv- 
alent to a characteristic function for a classical probability 
distribution. We may proceed by following of the numerous 
classical proofs, such as Ref. [34]. Central limit theorems are 
fundamental to our method and so for completeness we will 
provide a proof here. 

From the definition of a characteristic function, it follows 
that it can be expanded as 



where v is the second moment in direction r, such that 



2tr[(r.Q)V], 



(42) 



(43) 



and the higher order terms C(x^) can be shown flE', '34] to 
satisfy C{x'^)/x^ — >• as x 0. Hence, the A^'^ function in 
the sequence is 



fN{t) 



2N 



V + C(flN) 



N 



(44) 



We wish to compare this with exp(— i^;/), and so the differ- 
ence of these quantities is 



SnW = \fNit)~exp{~t^iy)\. 



(45) 



We can approximate exp{—t^i/) with some (1 — t^v/N)^ to 
any accuracy e/2 > 0, such that there exists an N'^ and for 
TV > Nl we have 



6N{t) < 



1 - 



c 



N 



- l- 



N 



N 



< 



Next we use that for any complex numbers, a and b, with \a\ 
land|6| < 1 we know (see App.|B]l that |a^-6^| < iV|a-6| 
and applying this yields 



SNit) < N 



1 



N 



C 



V 

N 



N\C (t^/N) 



e 

2' 



(46) 



where = /N . For constant t, we can decrease x to any 
desired value by increasing N. Since C (x^) /x^ vanishes in 
this limit, for any desired -q — e/2t^ > we can find a iV" 
such that for all N > N'J we have \C (x^) /x^\ < ?]. Hence, 
we have 



(47) 



This final result holds for N > max(A^,', A^,") = N^. The 
above argument tells us how individual points evolve in N, 
but the result can be strengthen further for all points within 
a ball of finite radius tq. This extension to finite regions of 
phase space is outlined in App |C] This result is stronger as 
the same error bound uniformly holds across a whole region 
simultaneously. The region has a finite area and extensions 
of this result to the whole of phase space do not hold. In- 
deed, central limit theorems are aptly named as they dictate 
the limiting behaviour around the origin of phase space but 
not into the tails (see also the similar discussion related to 
non-commutative central limit theorems applied to grasping 
quantum many -body dynamics 1.35. ,36J ). 



B. Convergence of moments 

Next we present a second aspect of central limit theorems, 
which will prove useful in the following sections. Here we 
consider the evolution of expectation of operators of finite mo- 
ments. First we generalize the idea of a quadrature. Typically 
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we think of single mode position or momentum operators as 
being quadrature operators, but we consider all linear combi- 
nations 



H = 



(48) 



The /c"^ moment of such an operator is the expectation value 
of H^, assuming first moments are zero. More generally, we 
say an operator is a fc'^ moment if it is a product of k quadra- 
tures, such that 



(49) 



0=1 



(48 1 



where each Hj is linear in quadrature operators as in Eq 
Another result known as a central limit theorem is the fol 
ing. 



Theorem 2 (Convergence of moments) For any central 
limit sequence {tjv} and any fc"^ moment, H^''\ in the large 
N limit 



tr(i?WTjv)-tr(i/W^^)| 



0. 



(50) 



More general results can be found in Refs. Il37l l38l and in 
App. |D] we present a simplified argument. The theorem can 
be easily extended to finite linear sums of moments. 

Corollary 1 (Finite sums of moments) Consider an opera- 
tor, H, which is a sum of finitely many terms, each a A:**^ mo- 
ment. The sequence of operators t^^ for increasing N obeys 

|tr(iJTjv)-tr(HT^)| ^0. (51) 



C. Matrix element convergence 

The above theorems tell us about the evolution of the char- 
acteristic functions and moments but what can be said on the 
level of the density matrices r^r? We have the following: 



Theorem 3 (Pointwise convergence) Consider a central 
limit sequence {tn} and a pair of pure states {|'0fe)i l^j)}> 
the limit of large N 



\{i'k\TN\'ipj) - {lpk\Too\lpj)\ 0. 



(52) 



This tells us that individual matrix elements converge to- 
wards a fixed value and we give a proof in App. |E] This re- 
sult informs us of the evolution of the filtered object tat = 
PpNP/tT{PpNP)- However, we really want to know about 
the physical state p^, and this is the problem we turn to in the 
next section. 



V. CONVERGENCE OF PHYSICAL STATE 

Knowing the filtered object obeys a central limit theorem, 
we can draw conclusions about how the actual physical state 
must evolve with N. We demanded without loss of generality 
that P was an invertible matrix, as this allows us to conclude 
that there exists a unique operator, 

PN oc P-^TNP-'^. (53) 

Concerning these states we shall show the following. 

Theorem 4 (State convergence) Consider a central limit se- 
quence {r^r} with limiting Gaussian operator Too and covari- 
ance matrix F^.. Denote 7 as the covariance matrix of the 
CJ-state — see Eq. (14\ — isomorphic to the channel V, such 
that V{p) = PpP for some Gaussian P. If the covariance 
matrix 



7ab(7AA - r^oo) ^lAB-lBB (54) 

^ exists and is a 
. Furthermore, if 



"V P 

'00-* 



exists and is physical, then p^o oc P 
Gaussian state with covariance matrix T p 

IV'j)} <^f^ eigenvectors of P, the sequence {pn} in the 
large N limit satisfies 



{li>k\PN\^o) (V'felPoolV'i) 



tv{PpNP) tr{PpooP) 



0. 



(55) 



Above we define a limiting physical state and show a weak 
form of convergence of the density matrix elements up-to a 
normalisation factor. It is worth noting that most existing re- 
sults in the literature only go this far, though we will be inter- 
ested in going further 

Corollary 2 (Fidelity estimate) In addition to Thm. |4] if also 
in the large N limit we have tr{PpNP) — > tr(PpooP) then 
also 



F{pN,Poo) 1 

where F is the fidelity between its arguments. 



(56) 



The corollary straightforwardly follows as if tT{PpNP) con- 
verges to tr{PpooP) then we have that for increasing N, 



\{ipk\PN\i^j) - {i^k\Poc\'tpj)\ 0. 



(57) 



Furthermore, it is well-known that for physical states element- 
wise convergence of the density matrix entails converge in 
terms of fidelity and other measures of similarity such as trace 
norm distance |33|. However, the corollary rests upon addi- 
tional key assumption that is the focus of the next section. 

To prove our state convergence theorem we first find F,-^ 
in terms of Fp^ , under the assumption that poo is Gaussian. 
Since P is invertible there will be a unique physical state, de- 
fined by PpaoP oc Too, and so the Gaussianity assumption 
is legitimate proved we do find a possible Gaussian solution. 
The operators are related by a CP-map, A 1— > 'P{A) = PAP 
with Gaussian P, and so we can apply the results of Refs. H]- 
|6i on Gaussian channels and the CJ isomorphism (reviewed 
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earlier). This tells us that for channel V with Gaussian CJ 
state acting on a Gaussian input state, the covariance matrices 
are related such that 



lAA - 1ab{ibb + Tp^ 



(58) 



where 7 is as defined in Eq. ( [T4| . To reach Eq. (54 1 we simply 
rearrange the above expression for Tp^ . 

Furthermore, denoting {iV'j)} as the eigenvectors of P 
with eigenvalue Aj, we can apply Thm. [3] with respect to 
{IV'j), iV'fc)}- This tells us that for large enough N 



AjAfc(Vjfc|pAf|-i/)j) 

iT{PpNP) 



AjAfc(-i/)fc|poo|-0j-) 
tr(PpeoP) 



(59) 



After cancelling the XjXk factors we have proven Thm. [4] 



A. Convergence in fidelity 

In the previous section we made very general, but weak, 
predictions on the evolution of the physical state. In order to 
deduce stronger conclusions, as captured by Cor. we need 
that tr(PpArP) converges to the value tr(Ppoo-P)- Whether 
our protocols work correctly rests on the validity of this as- 
sumption. The assumption appears fairly innocuous but is ac- 
tually quite subtle as instances exist where it does not hold, 
and the importance of this assumption has been often ne- 
glected in the literature. 

Some sufficient conditions were given in Ref. |26| for this 
assumption. Here we strengthen these results, providing the 
basis for studies in subsequent sections. Our result makes use 
of the idea of a reference state that we first define. 

Definition 2 (Reference state) Consider an operator t and a 
Gaussian filter H cx exp(— /3j6|6j) where bj — VajV^ 
for some Gaussian unitary V. If Tt-^i is a Gaussian state, we 
write T <n Trcf if both of the following are satisfied: 

(i) |tr(ff('=)T)| < |tr(H«r,ef)|; 

(ii) |tr(i?('=)T,ef)| =tr(i/('=)r,rf); 

for all moments H^^^ composed of finite products o/{&j, Sj}. 
When T <n T^cf we say r^cf is a reference state for t w.r.t. 11. 

The concept is especially useful when considering central 
limit sequences because of the following. 

Lemma 1 (Persistence of reference state) Consider a cen- 
tral limit sequence {tjv} and a Gaussian filter 11. If for any j 
there exists a Gaussian Tref such that tj <n Tiof then for all 
N > j we have tjv <n ^rcf- 

That the reference state remains good for all N can be proven 
iteratively. For any fc*'^ moment. 



ti{H^''^TN+i) = tr[C/^(ll (g) H^''^)U{tn ® Ti)] 



(60) 



The conjugation of _ff ('^'^ by U gives a sum of 2*^ terms, each 
a product of {Sj, bj} operators. We label each term by x, with 



it having the form Hx (g) Hx for some integer jx that 
depends on x. In particular there are k choose j terms for each 
jx- In this notation 



C',tr(i/i'=--''==)rAr)tr(ff(^'.)Ti), 



where Cx = R)^ ■ Assuming that the properties 

of reference states hold for tjv, we have for that 

|tr(i/(^)r^+i)l <J2CxMHi''-=-^r^)\.MHi'''^n)\, 

X 

< J2 C.tr(H('=-^"^)r„f)tr(ij(^'^)Trcf). 

X 

Next we recall that Gaussian states are invariant under the 
beam-spiller unitary, [/(riot fg Trof)C^^ = TVof ^ r^cf, as was 
shown in App. |A] Being invariant under beam-splitters, Gaus- 
sian states must also be fixed points of the protocol and since 
Ticf is Gaussian 



Using this invariance and applying it to the problem at hand 
we conclude 



|tr(77WT^+i)| <tr(H(*)r,.ef). 



(62) 



This shows, as claimed, that when a reference state has the 
desired properties with respect to some tj and then it auto- 
matically follows for all Tpf>j. The concept of a reference 
state is fundamental to the following result. 

Tiieorem 5 (Convergence in fidelity) Consider a central 
limit sequence {tn} and filter 11. If there exists a tj G {tn} 
and Gaussian T^d such thatTj <n Ticf and ti [11^ ^Tid) < 00 
then 



tT(UpN) -> tr(n/9co), 



(63) 



where pjy = P ^tnP ^/tr(P ^tj^P ^). Furthermore, as 
N increases 



F{pN,Poo) 1- 



(64) 



This tells us that, assuming a suitable reference exists, the 
convergence behaviour of the operators tm is inherited by the 
physical states, p^r. In Ref. |26| a similar result for the case 
Ticf — Too was shown. Although this is useful in some cases, 
often Too will not always satisfy the conditions for a reference 
state and so this result allows us to use another operator as a 
proxy. 

Our approach to the problem is to find tiilipN) by calcu- 
lating the expectation value of tm with respect to 11^^. These 
are related by 



tr(n-Vw) 



tr(nn-VAr) 

tr(np 



1 



N 



tr(np 



N 



(65) 
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The Gaussian filter can always be written as the exponential 
of some Hamiltonian 



(66) 



such that n — cxp(— i7n), where Hu is Hermitian and 
quadratic in annihilation/creation operators. The inverse fil- 
ter is then 11^^ = exp(+_ffn) and 



tr(n" 



/ °o Tirfc 



\k=0 



k\ 



(67) 



Each term is a sum of moments of degree 2k, and so it is 
tempting to think that Thm. (j2|i can be directly applied. How- 
ever, the whole sum has infinitely many terms and so Thm. (|2]i 
cannot be applied. Each tr(i7^Trcf) is positive and, by as- 
sumption, the infinite sum gives a finite value. It follows that 
for any e > we can pick an integer kc such that the trunca- 
tion satisfies 



tr 



E 



k\ 



Trcf 



(68) 



for the reference state r^cf . Furthermore, using this k^, we can 
partition the summation for tn such that 



tr(n- Vat) = tr 



tr 



E 



Hi 
k\ 



(69) 

Now the first term is a finite sum and so the results of Thm. (|2]i 
do apply to this portion of the sum. Hence, for sufficiently 
large N 

|tr(n-i(TAr-poo))| <e + |tr( ^ -^{tn-Too))1 



OO 



T-,.cf)|, (70) 



where in the last line we have used the properties of a refer- 



ence state. Combining this with ( 68 1 we deduce that for large 
enough N 



|tr(n-i(rw-Po,))| <3e 



(71) 



By taking longer truncations kc and larger N, the value of e 
can be made arbitrarily small. Therefore, we have that for 
increasing N 



tr(n-irAr) ^ tr(n-Vo 



(72) 



and consequently tr(np7v) approaches tr(npoo) and the fi- 
delity between these states approaches unity. 

These techniques, in particular the use of reference states, 
give us a handle on this difficult part of the problem. The 
central limit theorems ensure that the filtered operators tn 
converge to a Gaussian, but they give no guarantee on the 



behaviour of expectation values for unnormalizable opera- 
tions like n^^. Indeed, it is not difficult to find central limit 
sequences for which tr(n^^T7v) diverges with N. In such 
pathological examples, the physical states would also di- 
verge with ever increasing energy. However, when a suitable 
reference state exists the higher moments are bounded and 
these pathologies cannot occur. 

The limiting operator Tqo may sometimes be chosen as a 
reference state, but in some cases it is unsuitable. Now we will 
discuss a few facts that simplify the task of finding a suitable 
reference state. First, we note that if 



|tr(ff(^-)T,ef)| -tr(H('=)r,ef) 



(73) 



holds for all second moments then it must hold for all higher 
moments also. By Wick's theorem (see App|D]i the higher 
moments for Gaussian states are simply a positive polynomial 
in 2"^ moments. Consequently, positivity of higher moments 
is inherited from positivity of second moments, which sim- 
plifies the search for appropriate reference states. For single 
mode states there is one very simple class of potential refer- 
ence states. Consider the pure squeezed states 



^A"|2r 



(74) 



where < A = |A| < 1. Calculating {ipjila^alipu) and 
(ipiilaalipii) we find they are real, positive and increasing 
with A. This gives a promising class of single mode refer- 
ence states, as for any ti and any even moment iJ'^'''' we can 
find a large enough A such that |tr(i/('^Vi)| < tr(_ff ('"'Vrcf ). 
However, Thm. pi also requires that tr(n^^rrof) < oo, but 
there will be a critical value of A at which this expectation 
value diverges. For many single mode central limit sequences 
there will exist a choice of A that satisfies these requirements, 
though some counterexamples do exist. For multi-mode prob- 
lems, pure squeezed/entangled state can make suitable refer- 
ence states. 

In the previous paragraph we focused on the even moments 
of the Gaussian state. It is easy to check that all Gaussian 
states, with zero first moments, will have vanishing odd mo- 
ments. This seems to entail severe constraints on the odd mo- 
ments of Ti, which for generic operators will not be meet. 
However, this problem can be remedied by a physical proce- 
dure that is a CV version of twirling. The concept of twirling 
also arises in entanglement distillation of finite dimensional 
systems |39| and magic state distillation |40 | in fault tolerance 
architectures and serves to generate a symmetry in the initial 
resource that significantly simplifies the analysis of protocols. 
The twirling map we prescribe here applies, with 50/50 prob- 
ability, either the identity or the local Gaussian unitary, Ut, 
that maps aj H> —aj for all j, such that 



T{pi) = -{pi + UTPiUi.) 



(75) 



For such a twirled state, the odd moments have zero expecta- 
tion value whereas the even moments are unchanged. Further- 
more, twirling the physical state also results in twirling on the 
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level of the filtered object, since 



PT{pi)P 

tT[PT{pi)P] 



T{PpiP) 



tv[T{PpiP)] 
T{PpiP) 



(76) 



tr[PpiP] 



-r(ri). 



The above follows immediately from the observation that Ut 
commutes with P as it does not change second moments. An- 
other consequence of twirling preserving second moments is 
that the central limit sequence evolves to the same Too inde- 
pendently of whether we twirled or not. However, having 
twirled and eliminated all odd moments makes it possible for 
good reference states to exist and for Thm.[5]to hold. 

Finally, we give another remark on condition (i) of the def- 
inition of reference states. For brevity we stated that this must 
hold for all products of operators {foj, However, we only 
need to verify that the condition is valid for all normally or- 
der operators. Recall that normally ordered operators have all 
bj operators to the left side of any bj operators, so bjb is nor- 
mally order but bjb^j is not. By using bjb^j = b^^bj + 1 it is easy 
to rewrite the relevant operators — those composed of prod- 
ucts from the set bj} — as a positive sum of normally 

ordered operators. Provided |tr(_ff^'^Vi)| < tr(_ff ^'^Vict) for 
normally order operators it follows that the same holds for 
positive sums of normally ordered operators. Again, this ob- 
servation is useful for reducing our workload for verifying that 
a purported reference state indeed meets all the requirements. 



VI. HYBRID (CONTINUOUS VARIABLE) QUANTUM 
REPEATERS 

Quantum repeaters are one of the main applications of the 
various variants of entanglement distillation discussed and 
proposed here. The aim of quantum repeaters is to distribute 
entanglement over large distances in the presence of noise. 
There are many variants of such schemes, though they all 
share the common feature of using entanglement swapping 
rounds that entangle pairs that have not interacted in the past 
and distillation to reduce noise. It has long been known 
that discrete variable repeater networks enable distances to be 
reached that are far beyond those achieved by direct transmis- 
sion of quantum states BTl Surprisingly, despite con- 
siderable work on CV entanglement distillation, it has not 
been shown that CV repeater networks can outperform di- 
rect transmission. Here we give the first evidence that CV 
repeater networks can outperform direct transmission, albeit 
under some idealised conditions. In particular, we do not com- 
pute rates of entanglement production as these calculations are 
very computationally intensive for CV systems and so beyond 
our scope. 



A. Primitives 

The primitives discussed and introduced here are useful in 
constructing CV quantum repeater schemes. It is beyond the 



scope of the present work — focusing on the functioning of 
the primitives as such — to present a comprehensive study of 
the possible repeater schemes that can be devised based on 
these basic elements. Given the importance of this applica- 
tion, we however sketch what parameters may be varied in 
variants of such schemes. 

• Gaussification: There are several ways conceivable of 
the extent to which one performs Gaussification, includ- 
ing a recursive Gaussifier, a temporally-reordered re- 
cursive Gaussier, a pumping Gaussifier, and others, see 
above. Since convergence of these protocols is fast, and 
in order not to arrive at low rates, it seems advisable to 
perform very few steps in each instance. The resource 
requirements, in particular involving memory require- 
ments, are different in these schemes. The framework 
developed here and in Ref. |26| allows for a trade-off 
between success probability and quality of the output, 
when projecting onto Gaussian states different from the 
vacuum. 

• Swapping: The precise procedure of entanglement 
swapping may be varied, with the original nested 
scheme being only one possibility. For Gaussian states, 
the optimum Gaussian entanglement swapping scheme 
is known 143 » .44] and is used subsequently. But other 
swapping steps are conceivable as well, such as mixing 
inputs at a symmetric beam splitter and projecting the 
outputs onto certain photon number states. 

• Non-Gaussian operations: Given a source of Gaus- 
sian entangled states some non-Gaussian operation will 
be required prior to Gaussification, which is said to 
de-Gaussify the initial state. There are many possi- 
ble ways to perform non-Gaussian operations in the 
scheme, such as in particular only at the beginning, or 
also in later steps of the protocol. Also, several kinds of 
non-Gaussian steps have been considered in the litera- 
ture so far. This includes (i) a mixing of the signal at a 
beam splitter with a single photon state, followed by a 
measurement at one of the output ports |7, 8|. We will 
refer to this step as single photon replacement since a 
single is both added and removed, (ii) One can think 
of photon subtraction schemes, again leading to non- 
Gaussian states 1 8 , 11 , 45 -48 1 . (iii) Ref. 1 1 1 1 inti'oduces 
a modified non-Gaussian operation that is experimen- 
tally more challenging, but suggests higher rates in a 
distillation scheme. 

• Non-Gaussian inputs: In order to arrive at reasonable 
success probabilities, it may also be advantageous to 
make use of non-Gaussian input states that have higher 
photon numbers suppressed by their very preparation 
mechanism, such as using entangled pairs generated 
from quantum dots in bi-photon cascades (see, e.g., Ref. 
Hi). 

These parameters can be altered in benchmarking the func- 
tioning of such protocols, along the lines as has recently been 
done for discrete-variable quantum repeater schemes |50|. 
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m such sources of two mode 
squeezed states. Here we 
illustrate with m=4. 



FIG. 3. A schematic of the CV repeater network considered here. 
Sources are assumed to produce pure two-mode squeezed state of 
some chosen squeezing. Channels are predominately affected by 
attenuation, but also a small amount of room temperature thermal 
noise. Degaussification is performed by photon replacement. Gaus- 
sification is performed as described here and in previous work using 
measurements projecting onto the vacuum, using many copies of the 
de-Gaussified state and asymptotically approaching a Gaussian state. 
Entanglement swapping uses deterministic optimal continuous swap- 
ping protocol. 



Needless to say, in any such effort, not only the losses in 
transmission have to be taken into account, but also the im- 
pact of imperfect swappings and Gaussification as well as 
issues of mode matching. Symmetric entanglement distilla- 
tion schemes may be also favourable compared to asymmetric 
schemes 1.5 1 J . 



Rates in continuous-variable key distribution schemes will in 
particular relate on this quantity. Indeed, a Gaussian state p 
with a covariance matrix of the above form is entangled if 
and only if A{p) < 1 (the implication still being valid in one 
direction in case of non-Gaussian states). 

The numerics presented here are based on the following CV 
repeater protocol (also illustrated in Fig.[3]i: 

1. Each of the m = 2^ sources repeatedly produce many 
copies of a pure two mode squeezed state (squeezing 
parameter r); 

2. Each half of every entangled pair is transmitted a dis- 
tance I to a repeater node; 

3. Photon replacement is used to probabilistically de- 
Gaussify; 

4. The de-Gaussified states are now iteratively Gaussified; 

5. The Gaussified state are swapped k times until a en- 
tangled is shared across the full distance L = 2ml = 

2''+H. 

We require that the first step produces pure two-mode 
squeezed states of the form of Eq. ( [77| . We set C — cosh(27-) 
and S — sinh(2r) and call r > the squeezing parameter, for 
which we consider a range of possible values. 

After the second step the entangled pairs suffer noise from 
transmission over a noisy channel. For photons travelling in 
optical fiber the dominant noise source is attenuation through 
absorption, scattering and mode mismatching. Indeed, atten- 
uation is so dominant that previous analysis of CV distilla- 
tion protocols has focused on pure attenuation noise channels. 
A solely attenuating channel will never completed eliminate 
the entanglement of a transmitted two-mode squeezed state. 
We consider Gaussian channels with a small contribution of 
additional noise, on top of attenuation, such that covariance 
matrices evolve as 



7 I— ?> e 



'7 + (l + 2nth)(l- 



(79) 



B. Our repeater network 

Here we introduce a concrete class of quantum repeaters 
than are analysed in the next section. In these protocols, any 
covariance matrix of any two-mode Gaussian state p encoun- 
tered at any step is of the form 



C Q S Q 

C -5 

5 C 

Q -S Q C 



(77) 



where C, S' > with > 1 + S"^. For a pure two-mode 
squeezed state, = 1 + 5*^, this equality becoming an in- 
equality in case of mixed Gaussian states. The EPR uncer- 
tainty f52l, which for a Gaussian state with a covariance ma- 
trix as in Eq. ( [77] i takes the simple form 



(78) 



where I is is the distance (herein all distance in km) travelled 
by each mode and Zatt is the attenuation length of the fiber 
optic. In the infinite distance limit the state becomes thermal 
with an average photon number rith- Applying such a noise 



model to the pure Gaussian state of Eq. ( 77 1 gives a mixed 
state of a similar form where 



C 

s 



cosh(2r) + (1 + 2nth)(l - e 
sinh(2r). 



), (80) 



Herein we take /att = 22 km as this is the state of the art 
for current fiber optic cable. For a pure attenuation channel 
nth = 0, but we take nth = 10^^ as this corresponds to 
the thermal photon occupation at room temperature. Realis- 
tically, we expect channels to suffer from other noise sources 
such as phase drift and an elevated nth due to scatted photons 
present in a cable being operated at high bandwidth. However, 
the interesting feature of our analysis is that even our highly 
optimistic value of nth is sufficient to put a hard cap on the 
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distance at which various protocols can propagate entangle- 
ment. Assuming an initially pure two-mode squeezed state 
with squeezing parameter r, the maximum distance possible 
by direct transmission before the state is separable is easily 
found to be 



Zmax(7') = 2Zattl0g 



1 + 2nth - cosh(2r) + sinh(2r) 



This increases with r approaching the limiting value 

1 

2nth 



lim ;,nax(?') = 2;att log 1 



(81) 



which for our chosen parameters evaluates to 780 km. State of 
the art experiments have achieved quantum communication, 
directly and without aid of repeaters, at a distance of 250 km 
ll53l . Our upper bound is of the same order of magnitude but 
larger as we take an optimistic noise model. We do not take 
into account additional losses due to imperfect swapping or 
Gaussification; this analysis is done to merely exemplify the 
optimum performance anticipated, to be used in benchmark- 
ing efforts |54| of more realistic schemes. 

On the 3rd step of our repeater protocol we de-Gaussify 
by using symmetric photon replacement. The process begins 
with mixing a mode of the entangled pair on beam-splitter of 
transmittivity rf G [0,1] where the second input mode con- 
tains a single photon. Next the reflected signal mode is mea- 
sured with a single photon resolving detector and we postse- 
lect on seeing a single photon. Such de-Gaussification proce- 
dures have been extensively studied LT J. 51 1, and so we shall 
not repeat a full analysis here. However, it is informative to 
introduce the variable 



(i,i|p|o,o) 

(l,0|p|l,0)' 



(82) 



which is meaningful because it is unchanged by photon re- 
placement, or indeed any operation with Kraus operators diag- 
onal in the Fock basis. In particular for a symmetric Gaussian 
state of form Eq. ( [77] i we find 



+ 5^ - 1 
25 



(83) 



This variable is of interest as it cannot be increased either by 
Gaussification |55l or photon replacement. Indeed e remains 
unchanged by any local de-Gaussifying procedure resulting in 
Kraus operators diagonal in the Fock basis. 

In a variation of the argument presented in Ref. f5T\ to ac- 
commodate for thermal noise, one obtains a that the net ef- 
fect of de-Gaussification and subsequent Gaussification, using 
P = |0, 0) (0, 0|, is that the state evolves to a Gaussian with 



C = 



5 = 



A^(l-e2) + l 
(1 - eA)2 - A2 ' 
2A 

(l-eA)2-A2' 



(84) 



where e depends on p after transmission through the noise 
channel and A can be tuned to any value in the interval 



< A < (1 + e)~^ by suitable choice of the beam-splitter 
transmittivity used in de-Gaussification. Larger values of A 
provide more entanglement in the final state, and we have nu- 
merically found that larger values also produce repeater net- 
works capable of reaching larger distances. However, larger 
values of A also significantly reduce the success probability of 
de-Gaussification. Herein we assume that A = 0.99/ (1 + e), 
as any further increase results in only a negligible increase in 
maximum repeater distance. 

Having distributed entanglement and distilled at repeater 
stations, in the last step we iteratively perform swapping op- 
erations to generate entanglement between the most distant 
repeater nodes. In order to describe the optimum Gaus- 
sian entanglement swapping ||431 l44l consider the function 



defined as 



g{x,y) ^ (x- 



? 9 

r r 

2x' 2x 



(85) 



Indeed, the covariance matrix before of the form ( |77| i with 
C, 5 > is mapped onto one of the same form with 



iC',S')=giC,S). 



(86) 



If 21 is the distance between the repeater stations, such a 
scheme would distribute an entangled state over a physical 
distance of Z2('^+^) for k swaps. As such repeater networks 
are typically divided into m = 2*^ intervals for some integer 
k. This results in a mapping g''. 



C. Maximum distance of repeater networks 

In order to stress the potential of the primitives laid out in 
this work for the use in quantum repeaters, we discuss the 
maximum distance that can be reached in a repeater scheme 
outlined in the previous section. We say a scheme achieves a 
distance, L, whenever it produces an entangled state, as ver- 
ified by the Duan criteria, A(p) < 1, between the distant re- 
peater nodes. These results are summarised by Fig. |4] where 
we show the achievable distances for different numbers of re- 
peater stations and a range of initial squeezing parameters. For 
direct transmission — where no actual repeater techniques are 
exploited — we find performance is best in the large squeez- 
ing regime. However, we see that by using more repeater sta- 
tions, and hence more intensive distillation, greater distances 
may be achieved. This provides the first evidence that CV 
techniques may achieve distances of a global scale, whereas 
direct transmission is incapable of achieving relatively short 
distances, such as Berlin to London. We also see that us- 
ing more repeater stations typically requires a smaller initial 
squeezing. This is consistent with observations made in Ref. 
iBTI where they observed that distillation was more effective 
when combined with smaller initial squeezing. Though here 
we also see that this phenomena persists when the states are 
subsequently used for entanglement swapping. A possible ex- 
planation for this feature is that the more squeezed the initial 
state the more mixed the final state after suffering photon loss. 
Furthermore, the Gaussification process, while increasing en- 
tanglement, does not actually increase the purity and so the 
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Berlin to Berlin to Half Earth 
London New York Circumference 




L (km) distance 



FIG. 4. The maximum attainable distance, L, for a range of initial 
squeezing, r, for which entanglement can be distributed. Regions are 
shown for direct transmission and CV quantum repeater networks di- 
viding the distance up into m intervals. Some noteworthy terrestrial 
scales are shown at the top. 

limiting the impact of photon loss on purity is the key param- 
eter to be optimised. 

These results can be contrasted with those of Ref. f44\. 
Its authors compared the performance of direct transmission 
to use of entanglement swapping, but without the benefits of 
any entanglement distillation, and found direct transmission 
to be preferable. Our noise model and figure of merit differs 
from those of Ref. |44 1, but our own numerics also found that 
entanglement swapping without distillation always achieves 
significantly inferior distances. Such behaviour is a unique 
feature of CV protocols as the discrete variable protocol of 
Ref. [421 shows that swapping, albeit with some postselec- 
tion, can be beneficial. We also considered some other vari- 
ants of our repeater network. For instance, we considered sev- 
eral nested repeater schemes, where each entanglement swap 
is interleaved with distillation. Still, again we found that they 
achieved shorter maximum distances. 

It seems that, at least using the specific forms of Gaussifi- 
cation and de-Gaussification considered here that the results 
in Fig. [3] show the upper bounds of what is feasible with cur- 



rent technology. However, this does leave open the possibil- 
ity of using alternative de-Gaussification procedures, such as 
that proposed in Ref. [Ill, or suitable deterministically pre- 
pared non-Gaussian states to start with. As commented ear- 
lier, the parameter e is non-increasing through our distillation 
techniques, though those techniques can vary this parameter 
potentially leading to an increase of the maximum attainable 
distance. However, to-date such proposals are even more tech- 
nologically challenging than replacement of a single photon. 
On the other hand, while CV systems pay a high price for 
de-Gaussification they can produce two mode squeezed states 
at intrinsically higher rates than single photon sources. They 
also benefit from the higher efficiency of homodyne detectors. 
In future work, a careful analysis of rates will be made, includ- 
ing also a comparison with common discrete variable schemes 
that weighs these relative merits. 



VII. SUMMARY AND CONCLUSION 

In this work, we have further introduced and elaborated 
upon a formalism general enough to capture all of the known 
schemes of entanglement distillation leading to Gaussian 
quantum states, as well as to construct a plethora of new ones. 
The flexibility of the approach allows to think of trading suc- 
cess probabilities against the quality of the resulting entangled 
states, or to realistically take memory requirements into ac- 
count. As such, the formalism presented here provides a natu- 
ral starting point for comprehensive comparisons of different 
entanglement distillation schemes in the continuous-variable 
setting. At the roots of the formalism is a novel kind of non- 
commutative central limit theorem that is laid out in great 
detail. We also discuss the implications of the findings for 
devising novel schemes for quantum repeaters and highlight 
both potential and limitations. It is the hope that the general 
framework developed here gives a basis for assessing to what 
extent experimental large distance continuous variable quan- 
tum communication is truly feasible. 
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Appendix A: Conjugation lemma 

Here we show that for any Gaussian operator, P, with zero 
first moments, we have U{P (g) P)W = (P (g) P) where U 
is a multi-lateral beam splitter transformation. The Gaussian 
operator can be expressed as P (g) P = fcexp(— (ff^ + Hb)) 
and 

Hx=A,B = KjQxiQxj, (Al) 

i,3 

for some hi^j and so 

Ha + Hb = ^ hij{QAiQAj + QBiQsj)- (A2) 

The beam-splitters cause 

f/(P0 P)C/t = keM-U{HA + Hb)U^), (A3) 
and so we simply need to show that 

U {QazQaj + QBiQBj)U^ = QAiQAj + QBiQBj- (A4) 

Using the shorthand Jij for the R.H.S and conjugating the 
quadrature operators with the unitary we have 

UJijU^ = {VfQB^ + VRQA^){VfQBJ + Aj) 

+ {^QBi - VRQAi){VfQBj - VRQaj). 
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Expanding out, we find the cross terms {QAiQsj and 
QbiQaj) cancel leaving only 

C/J,jC/^ = (i? + T){QmQao + QB^QBJ)■ (A5) 

Recalling R + T = 1, we have U Ji.jU^ = Jij, which in turn 
entails the result U{P ^ P)W = (P (g) P). 



Appendix B: An inequality 

For any complex a and b satisfying \a\ < 1 and |6| < 1 and 
any integer N, we have - < N\a - b\. For iV = 1 it 
is trivial and for higher N it is proven iteratively, 



1^ -b'^\^\(a~b)a''-^ +b{a^- 
< \a-b\ + \a^-' -b""- 



(Bl) 



where we have used the triangle inequality and |a^^^| < 1 
and |6| < 1. Each unit increase in N contributes at most an 
additional \a — b\, and so we have the desired result. 



Appendix C: Uniform convergence 

In the main text we prove Thm. [T] for an individual point 
of phase space. Here we extend it to a uniform result over 
balls of finite radius. For any finite set of points 7?.finitc = 
{ri,r2,...} convergence is uniform over that set as it is 
bounded by the point that converges slowest. For any small 
distance, 6, we can find a 7?.finitc such that any point inside 
the ball is less than distance 5 from some point in the finite 
set. All X G {Xrjvl are continuous and within the ball there 
is a maximum possible gradient. Hence, for every point in 
the ball we can approximate the characteristic function by a 
nearby point in the finite set 7?,fi„itc and uniform convergence 
follows. 



Appendix D: Moments convergence 

Here we present a proof of Th m. [2| that follows the com- 
binatorial argument of Refs. 1371 \3S\ . Our proof is not as 
general, but benefits from requiring less mathematical back- 



ground. We consider a single k^^ moment H'^'^^ 



tr 



(Dl) 



tr 



n E 



,th 



where Hj^x indicates the Hj operator but acting on the x 
of the N systems. We need to expand out the brackets and 
some way of labelling terms. We have k different opera- 
tors that can act on N different copies. Each possibility 
can be represented by a partition of k values in to bins. 



For example, for fc = 4 and TV = 5 a possible partition is 
B = {{1, 2}, {}, {3}, {4}, {}} with which we associate with 
a term H1H2 €5 1 (8) H4 (g) 11. In general, for a partition 
B = {Bl, B2, B^, . . . , Bjv} we associate an operator 



Hp 



where 



Hb. = n ^: 



J' 



(D2) 



(D3) 



with the product over j e B^ always taken in order of smallest 
to largest value of j. In this notation 

1 



il(HBTN) 



tr 



(D4) 



N 



\[It{Hb^t{). 



The next key step of the proof is a smart way of collecting 
up terms with similar properties. We define L{B) to be the 
number of non-empty bins in B and then collect terms with 
the same value. 

1 



b L{B)=b 



1 



N 



Nk/2 

b L{B 



E W^^Hb^^i)- (D5) 



=bx=l 



For any B there are N\/{N - L{B))\ = N{N -1)---{N ~ 
L{B) + 1) partitions that differ by only a permutation of 
whole bins. For instance, B ^ {{1, 2}, {}, {3}, {4}, {}} and 
B' = {{}, {3}, {1, 2}, {4}, {}} differ only by a permutation 
of whole bins, and so give the same expectation value. We can 
also choose a canonical set B such that for every B there exists 
a unique B' E B such that B and B' differ only by a permu- 
tation of whole bins. By summing over just the canonical set 
we have, 



tn) 



b ^ 



N 



b)\ ^ 

f L(B) = b: X 

Bets 



n 



BTl- 



(D6) 



We proceed by showing that terms with b < k/2 and b > k/2 
are either zero or decreasing with N, and so only the b — k/2 
terms persist in the large N limit. 

When L{B) > k/2 there must exist at least one bin B^ that 
contains only 1 element, so Hb^ — Hj for some x and j. This 
factor contributes tr{HjTi) to the product, but by assumption 
tr{HjTi) — and so all such terms vanish. As for the case 
with L{B) < k/2, we observe that as increases 



m 

Nk/2{N - L{B))\ 
Furthermore, for all N > k the factor 

N 



0. 



(D7) 



(D8) 



L(B) = b; 
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is constant with N as the number of canonical partitions stops 
increasing. Therefore, for any b < k/2 the product of these 
terms vanishes with N. 

This leaves only b = k/2 terms as potentially non- 
vanishing. Note that, if k is an odd number there are no 
suitable integer b values and so all odd moments will van- 
ish with increasing N. Assuming k is even, the only non- 
vanishing partitions consists of pairings, such that each bin 
contains either 2 elements or none. That is, non-vanishing B 
have Hb^ = HjHk or Hb^ = 1 for all x. Putting this to- 
gether we have 



N 



lim tr(Q''TAr) = lim 



iV! 



w^oo Ar'=/2(Ar-fc/2)! 
tr(i?B^Ti), 



E 

Be Bp, 



(D9) 



where ;Bpair is the set of canonical pairings. The expectation 
value only depends on the 2"'^ moments of ti and so we can 
replace ti with the Gaussian state with the same second mo- 
ments, namely Tqo. The combinatorial factor approaches 1 
and so 



Similar reasoning allows use to deduce that since tr(i?_B^) 
1 and tT(TT^) < 1, we know 



(E2) 



(2^)-™y \xu^)\'<i. 

The absolute difference in expectation values between t^t and 



D 



N 



(E3) 



Xs(r) [xt„ (r) - (r)] dr, 
Xs(r)AAr(r)dr, 



\tT{BTN - tr(BT< 
_ 1 
-J2n) 
_ 1 
-J2n) 

where A^f — Xtn i^) ~ Xt^ (r). The proof proceeds by split- 
ting the integral up into two parts so = D'^ + D'^. We 
take D'pf to be an integral over a large but finite ball of radius 
R and Z?^ over the complement. Over the complement we 
have that 

Dn = I XB(r)A^(r)dr, (E4) 



{2^y 



'|r|>i?, 

|XB(r)pdr. / |A^(r)|2dr 

'\r\>R J\r\>R J 



N- 



lim tr(i7WTAr) = V tr(i7B^To,) =tr(H«T„,). 

N^r^ ^ ^ 

(DIO) 

In the simple case where the moment is a product of identical 
factors, so H^^^ = H'^, we have 



N 



lim tr(i/Vjv) = |6pah.|tr(i7V, 



)k/2 



(DID 



The number of canonical (unordered) pairings of k numbers 
is simply |/Spair| = (fc — l)(fc — 3) • • • 1, which is known as a 
double factorial ( A; — 1 ) ! ! . Consider the above results for when 
the input state is Gaussian, and so unchanging. This tells us 
that the higher moments of a Gaussian state are determined its 
second moments, as captured by Eq. (Dll i, which is a well- 
known result called Wick's theorem. 



Appendix E: Matrix element convergence 



whe re w e have used the Cauchy-Schwarz inequality. From 
Eq. (El I we can know J |xs(r)P = 1 and so the integral 
over |r| > R can be made arbitrarily small by increasing 
R. Formally, for any e' > we can find an R such that 
/|r|>fl IX-b(i")P ^ ^ ■ Furthermore, Eq. (El i entails that the 
integration over |A7v(r)P must be less than 2. Hence, we 
deduce 



\D" I < Ml 



(E5) 



which holds for all N . As for the integral inside radius R we 
have 

Wn\ < (2^)"" / \xB{r)A^{r)\dv. (E6) 

J\r\<R 



For all characteristic functions |x_B(r)| < tr(-\/ B) and so 
for B = {ijjjl^k) we have < 1- Furthermore we 

know that within a finite ball A]y{r) vanishes uniformly, so 
for any e' > there is a such that for all N > A^^' we have 



e'dr ■ 



\r\<R 



e"V 
(27rj™ 



(E7) 



Here we give a proof of Thm. |3] We move from statements 
about characteristic functions to operators by recalling that for 
an operator B = \4>j){ipk \ acting on an m-mode Hilbert space 
we have 



tr(i?T) = (2^)-™y XB(r)xr(r)dr. 



(El) 



where V is the volume of the ball. Putting this together we 
have, foT N > Nf^, that 



\{lpk\TN\ll^j) - {lpk\Too\i^j)\ < 



{2e') 



i2n) 



(E8) 



Since e' and e" can be made arbitrarily small, we have proven 
Thm. [3] 



